Skip to content
DDragonmonk111
Products
| Product | CVEs | Exploited | Latest |
|---|
| junoclaw | 5 | – | May 12, 2026 |
Exploited and recent CVEs
-
CVE-2026-43993
High 8.2
JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access
0.2%
-
CVE-2026-43992
Critical 9.8
JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter
0.2%
-
CVE-2026-43990
High 8.4
JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper
0.2%
-
CVE-2026-43989
High 8.5
JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation
0.1%
-
CVE-2026-43991
High 8.4
JunoClaw: plugin-shell shell-injection bypass via substring blocklist
0.2%